Senior Information Security Analyst - Cloud Specialist

at  Sainsburys

WHAT YOU NEED TO KNOW AND SHOW

• A strong technical understanding of security to ensure systems are designed and built securely and to help continually improve our security posture
• Appreciation of containerisation technologies such as Docker, Kubernetes etc.
• Experience with logging, monitoring, load balancing/proxies and API gateways
• Working knowledge of GitHub, Jenkins, Ansible, Chef and Puppet
• In-depth knowledge of the OWASP Top 10, Mitre ATT&CK, NIST frameworks, PCI-DSS and Cyber Kill Chain
• Familiarity with PAM, EDR, AV, IPS, SIEM, WAF and DLP technologies
• The ability to verify solutions and gain assurance that they are fit for purpose through demonstrable evidence of controls and testing
• Strong understanding of the changing threat landscape and how this may affect our systems
• Nice to have knowledge of Oracle and SAP clouds
• The ability to challenge concerns and report through appropriate channels
• Self-drive, motivation and the ability to work independently to deliver expected outcomes
• In-depth understanding of data and security risks in a large enterprise
• Risk Management experience and understanding of Risk Management Frameworks
• Strong analytical and report writing skills

DESIRABLE QUALIFICATIONS

You will have two (or more) of the following (including Cloud):

• CompTIA CASP+, Cloud+, Security+, Network+, Linux+

JOB TITLE / ROLE

Senior Information Security Analyst – Cloud Specialist

WHAT YOU NEED TO DO

• Support the security, resilience and redundancy of the cloud environments
• Liaise with the Security Testing Team to ensure that Ethical Hacking, Code Reviews, Application Scanning and Infrastructure Scanning is conducted
• Provide Subject Management Expertise to colleagues and management
• Help identify, assess and manage strategic, operational and emerging risks affecting the Cloud and articulate, quantify and monitor risks according to risk appetite
• Build and maintain strong senior stakeholder relationships within technology and the business to understand security risk and drive robust risk-based decision making
• Effectively articulate technical issues to business units and engineering teams
• Define Security Non-Functional Requirements for each project and ensure that they are fulfilled prior to going into service, ensuring the relevant technology standards are applied to specific projects
• Liaise with third-party strategic partners and providers who support Sainsbury’s